Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/gwl3pykqu74FmZJlQ2OM7C1aJgk.roa
File:                     gwl3pykqu74FmZJlQ2OM7C1aJgk.roa (raw, json)
Hash identifier:          4bPaw5NFzgro//gRmfsRyfaGv5ml1ocEG1jcQ7D3FlU=
Subject key identifier:   83:09:77:A7:29:2A:BB:BE:05:99:92:65:43:63:8C:EC:2D:5A:26:09
Certificate issuer:       /CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
Certificate serial:       018CC3B682BBFA252716B30E77C769385D5C
Authority key identifier: D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/gwl3pykqu74FmZJlQ2OM7C1aJgk.roa
Signing time:             Mon 01 Jan 2024 06:29:27 +0000
ROA not before:           Mon 01 Jan 2024 06:29:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     51143
IP address blocks:        91.216.172.0/24 maxlen: 24
                          2001:678:29c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:82:bb:fa:25:27:16:b3:0e:77:c7:69:38:5d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
        Validity
            Not Before: Jan  1 06:29:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=830977a7292abbbe0599926543638cec2d5a2609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7b:da:c1:ce:fc:0b:ea:ff:dc:39:8e:59:48:
                    29:13:5d:4c:ae:14:16:2f:32:99:e1:1d:64:4e:42:
                    8a:4c:fa:f6:f3:bb:04:41:21:39:cb:c9:6a:11:8b:
                    27:a0:20:2d:3e:4d:2f:13:af:96:1b:cd:21:39:f3:
                    46:42:73:d3:37:7e:20:e4:4d:29:e5:06:4c:84:a7:
                    d8:ab:2d:8c:aa:de:31:84:07:06:9a:d6:27:06:e5:
                    85:d8:39:84:b1:2f:fa:57:98:cd:69:8b:d7:44:e2:
                    e3:b2:2c:e7:c4:a7:79:dc:78:a4:ea:4d:5b:a5:61:
                    2e:ba:df:39:8c:10:15:ba:44:2d:07:0e:c3:c2:49:
                    31:96:9b:5a:70:37:6f:0e:35:54:d5:6f:4f:5d:c8:
                    ff:3f:9d:1e:6f:1c:17:e8:4f:cb:fd:a2:63:0c:99:
                    a0:8c:1c:8b:1a:93:10:16:48:dc:cf:ce:45:33:e8:
                    36:b7:e5:ad:e5:f8:22:b3:77:76:62:8e:6d:c2:7a:
                    26:a4:d7:b8:7f:26:39:72:8e:0c:25:13:a9:35:ea:
                    52:f0:c3:f5:46:c6:0f:4c:e2:19:1c:ff:60:70:af:
                    59:f0:eb:68:0f:69:af:67:b4:16:a9:ef:03:a5:48:
                    25:e4:11:c2:97:52:5e:87:bf:73:d1:f7:ab:d1:d6:
                    3c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:09:77:A7:29:2A:BB:BE:05:99:92:65:43:63:8C:EC:2D:5A:26:09
            X509v3 Authority Key Identifier:
                keyid:D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/gwl3pykqu74FmZJlQ2OM7C1aJgk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.172.0/24
                IPv6:
                  2001:678:29c::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:9c:7c:37:be:58:21:38:85:bd:96:b5:4a:b5:ad:64:9c:7f:
         87:b8:2b:9a:79:9a:34:1c:91:75:ac:48:0b:05:f2:24:33:29:
         e0:c4:d9:ee:4b:7a:87:26:28:d5:e1:10:79:fd:87:6a:fd:b3:
         56:78:dc:e0:de:41:31:5a:d7:c3:ce:a8:10:3c:67:5f:f6:ec:
         b5:96:1c:75:bf:06:59:5c:4b:ee:ef:75:02:94:6a:d5:ee:61:
         ae:d2:76:e3:1f:f4:9b:f3:5e:46:fb:e4:19:9e:b1:6a:cd:87:
         5a:8a:46:a8:e7:9a:80:39:25:ad:2d:e1:88:87:13:de:f7:10:
         bc:14:e0:10:d7:57:11:7e:da:0e:ef:94:ec:9e:4c:93:71:38:
         6b:84:cf:fa:70:33:5e:12:19:11:ad:40:4d:28:e9:5b:d6:bf:
         12:44:2b:0f:6a:96:a6:6b:42:40:ac:87:2a:30:e9:b2:99:53:
         da:50:2d:e4:86:23:c8:ec:3c:81:8e:21:f5:37:fa:b4:5d:a7:
         70:6d:9b:70:43:c8:66:3a:4a:2a:53:df:e5:48:2d:3b:67:8b:
         f9:98:a0:94:2f:3d:fa:75:f7:84:9c:c8:ef:ed:24:89:6a:f3:
         63:ed:fc:1e:76:bb:5a:86:7a:28:e1:04:cd:ae:7b:d4:14:49:
         e1:7f:d8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----